Abstract of the issue

I misplaced my keychain password, and can’t entry all my passwords saved in keychain. How can I crack/decrypt all of the passwords?

Particulars

I used to be utilizing 2 Mac pc (Mac OS X 10.6 and Mac OS X 10.7) to retailer all my passwords with keychain. A number of months in the past, I modified my keychain grasp password for each gadgets, however can’t keep in mind what I’ve set. I’m now unable to entry my passwords.

Completed researches

There was the same submit, so I’ve tried to observe the reason, however couldn’t succeed. The way to decrypt the system keychain from one other mac on the command line

What I’ve tried

  • Retrieved the [System.keychain] file from the “supply mac machine”
  • Retrieved the [SystemKey] file from the “supply mac machine”
  • Open terminal from the “goal machine” (linux machine to decrypt the passwords)
  • Run: hexdump -s 8 -n 24 -e '1/1 "%.2x"' /path/to/SystemKey && echo
  • Output: string-of-48-characters
  • Run: sudo pip3 set up hexdump
  • Output: Efficiently put in hexdump-3.3
  • Run: git clone https://github.com/n0fate/chainbreaker
  • Run: cd chainbreaker
  • Run: python3 chainbreaker.py -f /path/to/system.keychain -k string-of-48-characters
  • Ouput: can’t open file chainbreaker.py: [Errno 2] No such file or listing
  • As I used to be not capable of perceive how one can set up chainbreaker.py, I attempted to run chainbreaker as module through the use of the choice -m.
  • Run: python3 -m chainbreaker -a /path/to/system.keychain -k and enter string-of-48-characters when prompted
  • Output: all passwords are displaying as [Invalid Password / Keychain Locked]
  • Chainbreaker documentation https://github.com/n0fate/chainbreaker is suggesting to make use of hashcat https://hashcat.internet/hashcat/ , which is a software program that may decrypt password from hash and phrase dictionary.
  • Can’t use hashcast as 1) I do not know which hash mode is utilized by apple keychain and a pair of) I don’t use phrases for my passwords. My passwords are often one thing like [6Vhy6bonfay] or [T3rr@9L1f3-B0b]. So brute forcing by a wordlist is possible.

Marcus A. is a brand new contributor to this web site. Take care in asking for clarification, commenting, and answering.
Take a look at our Code of Conduct.

1


You have to
log in to reply this query.